Improper Access Control Vulnerability in Fortinet FortiSwitchAXFixed
CVE-2026-22628

5.1MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortiswitchaxfixed
Vendor
CVE Published:
10 March 2026

What is CVE-2026-22628?

An improper access control vulnerability exists in Fortinet FortiSwitchAXFixed versions 1.0.0 and 1.0.1. This flaw permits an authenticated administrator to execute system commands through a specially crafted SSH configuration file, potentially allowing for unwanted alterations in the system's operation.

Affected Version(s)

FortiSwitchAXFixed 1.0.0 <= 1.0.1

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-085

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.